Re: [SAtalk] Re: paris hilton

2003-12-12 Thread Chris Thielen
On Fri, 2003-12-12 at 19:44, Chris Thielen wrote: > I haven't updated the version history because exit0 appears to be down, > but the main link (http://sandgnat.com/cmos/cmos.pl) or the cgi Er... I'm dumb. Make that http://sandgnat.com/cmos/obfu.pl ... sure wish this list thing had a cancel but

Re: [SAtalk] Re: paris hilton

2003-12-12 Thread Chris Thielen
On Fri, 2003-12-05 at 12:05, Chris Thielen wrote: > [EMAIL PROTECTED] said: > > > If I enter a single-character string in the "easy mode" text box, the > > rules will somehow manage to drop the character from the obfuscated > > rules. I.e. for the input "d" I get the regex /(?!\bd\b)\b/i (and not

Re: [SAtalk] Re: paris hilton

2003-12-12 Thread Chris Thielen
On Fri, 2003-12-05 at 13:22, Chris Thielen wrote: > Adam D. Lopresto said: > >> My solution was to split the tokens into word/nonword classes and group > >> them. The characters in the word character class get the \b word > >> boundary > >> check, while the non-word character classes simply match

Re: [SAtalk] Re: paris hilton

2003-12-05 Thread Chris Thielen
Adam D. Lopresto said: > On Fri, 5 Dec 2003, Chris Thielen wrote: > >> What you're seeing here is the bugfix regarding word boundaries >> mentioned >> on the home page and the version history. I'll explain why it works >> like >> it does. >> >> Take this simple regex, for example: >> /asdf/i >> Le

Re: [SAtalk] Re: paris hilton

2003-12-05 Thread Adam D. Lopresto
On Fri, 5 Dec 2003, Chris Thielen wrote: > What you're seeing here is the bugfix regarding word boundaries mentioned > on the home page and the version history. I'll explain why it works like > it does. > > Take this simple regex, for example: > /asdf/i > Let's pretend my rules-gen script is much

Re: [SAtalk] Re: paris hilton

2003-12-05 Thread Chris Thielen
[EMAIL PROTECTED] said: > If I enter a single-character string in the "easy mode" text box, the > rules will somehow manage to drop the character from the obfuscated > rules. I.e. for the input "d" I get the regex /(?!\bd\b)\b/i (and not > the nonsensical /(?!\bd\b)\bd\b/i or an error message in t

[SAtalk] Re: paris hilton

2003-12-04 Thread era
On Mon, 24 Nov 2003 22:23:11 -0600 (CST), Chris Thielen <[EMAIL PROTECTED]> posted to spamassassin-talk: > ian douglas said: >>> Anyone have any good obfuscation rules for p4r1s h1|+0n spam? I'm >>> getting a ton of these every day... >> http://sandgnat.com/cmos/cmos.jsp gave me a good result,